TinyHousesCanada.com is operated by bKrazy inc. (NEQ 1175813386), a Québec-incorporated company at 181 Groh Ave, Cambridge, Ontario, N3C 1Y8, Canada. Phone: 1-437-567-5797. Email: info@tinyhousescanada.com.
We comply with: Québec's Act respecting the protection of personal information in the private sector ("Law 25"); the federal Personal Information Protection and Electronic Documents Act (PIPEDA); British Columbia's PIPA; Alberta's PIPA; and equivalent provincial laws across Canada. Since we operate out of Québec, Law 25 — the strictest regime in Canada — sets our default standard.
Our designated person in charge of the protection of personal information is Véronique Boucher. You can reach her by:
You may contact the privacy officer to ask questions about this policy, to exercise any of your rights (see below), to request a copy of our personal information management framework, or to file a complaint. We aim to respond within 30 days.
When you submit the contact form: name, email, phone (optional), postal code (optional), model of interest, project timeline, and the message you write. The cookie consent record itself is also retained for compliance.
When you visit the site: standard server logs (truncated IP address, browser user-agent, page paths, referring page, timestamp). Used for security, abuse detection, and basic performance — never matched to identity by us.
With your explicit consent (toggle in the cookie banner): aggregated, anonymized analytics through Google Analytics 4 — page views, session duration, device class, country-level location only.
We do not collect: precise GPS location; payment information through this site (we process payments offline through a separate signed contract); biometric data; nor any data via advertising trackers (we run none).
We use the information you provide for these specific purposes only: (1) respond to your inquiry; (2) prepare a written quote; (3) coordinate showroom visits or site visits; (4) negotiate and execute a contract if you decide to order a unit; (5) coordinate delivery; (6) honour warranty obligations; (7) meet legal, tax, and accounting requirements.
Server logs are used for security monitoring, fraud prevention, and incident response. Analytics data (when consented) is used in aggregate to understand site usage and prioritize content improvements — never to profile individuals.
We do not use your information for any other purpose unless we obtain a new specific consent from you.
Under Law 25 and PIPEDA, our processing is grounded in: your explicit consent (contact form submission, analytics cookie acceptance); contract performance (when you order a unit); and legal obligation (tax records, warranty records, accounting).
Submitting the contact form constitutes your explicit consent to use the information you provide to respond to that inquiry. Analytics cookies require a separate consent through the cookie banner — they are off by default. You can refuse analytics and continue using the site normally.
You can withdraw your consent at any time by contacting our privacy officer or by changing your cookie preferences (gear icon in the bottom-left of every page). Withdrawal is effective going forward and does not affect processing already lawfully performed.
Under Law 25 (Québec), the consent of a minor under 14 years of age must be given by a person having parental authority. We do not knowingly collect personal information from anyone under 14 without verified parental consent.
Our products and services are aimed at adults (typically 25-65). If you are under 14, please ask a parent or guardian to contact us on your behalf. If we discover that we have collected information from a minor under 14 without proper consent, we will delete it without delay.
Under Article 12.1 of Law 25, we are required to inform you if we make decisions about you based exclusively on automated processing.
We do not make automated decisions about you. Every quote, contract, and follow-up is reviewed by a human being on our team. We do not use AI or algorithmic profiling to evaluate, rank, score, or filter customers.
We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We do not allow any third-party advertising tracker on this site.
We share your information only with: (a) shipping carriers, when you order a unit, to coordinate delivery — name, address, phone, postal code; (b) lenders or financing partners, only when you explicitly request a financing introduction; (c) Netlify (our website host) and Google (analytics, only if you consented), as data processors under written agreements; (d) legal authorities, when required by Canadian law, a court order, or a valid legal request.
Your information is primarily stored on Netlify infrastructure with the option for Canadian regional hosting. Some metadata may transit through Netlify's US edge nodes. Where information is processed outside Québec or Canada, we conduct a privacy impact assessment (PIA / "évaluation des facteurs relatifs à la vie privée" under Law 25 Article 17) before the transfer takes place. This assessment evaluates: (a) the sensitivity of the information, (b) the purpose of the transfer, (c) the protective measures in the receiving jurisdiction, and (d) the legal regime that applies there. We ensure equivalent legal protection through Standard Contractual Clauses, vendor data processing agreements, and selection of vendors offering Canadian or EU-equivalent privacy frameworks.
Specific transfers and safeguards:
If you consent to analytics, the data is processed by Google LLC in the United States under Google's Standard Contractual Clauses. Google Analytics is configured with IP anonymization enabled by default.
Under Law 25 (Article 17), you have the right to be informed of any communication of your information outside Québec. The disclosures above satisfy this obligation. For specifics on any particular transfer, contact our privacy officer.
Contact form submissions: 24 months after the last interaction, then deleted or anonymized.
Active client records (orders, contracts, invoices): 7 years after project completion — required by Québec accounting and tax law and for warranty enforcement.
Server logs: 90 days, then automatically purged.
Cookie consent record: 12 months from the date of consent, after which we ask again.
Analytics data: 14 months, per Google Analytics 4 default retention setting.
Under Law 25, PIPEDA, BC PIPA, Alberta PIPA, and equivalent laws, you have the following rights regarding your personal information:
(1) Access: request a copy of the personal information we hold about you. We respond within 30 days. (2) Correction: request correction of inaccurate, incomplete, or out-of-date information. (3) Deletion / de-indexing: request deletion of your personal information, subject to legal retention obligations (accounting, warranty). (4) Portability: receive your information in a structured, commonly-used, machine-readable format (Law 25, effective September 2024). (5) Withdrawal of consent: withdraw your consent at any time, going forward. (6) Objection: object to specific uses of your information. (7) Information on automated decisions: request details on any automated decision (we make none — see above).
To exercise any right, email our privacy officer at info@tinyhousescanada.com with subject "Privacy Officer". We respond within 30 days. If we refuse a request (e.g. for legal retention reasons), we will explain why and how you can appeal.
If you are not satisfied with our response, you have the right to file a complaint with the regulator in your jurisdiction:
Québec residents: Commission d'accès à l'information du Québec — cai.gouv.qc.ca — 1-888-528-7741.
British Columbia residents: Office of the Information and Privacy Commissioner for BC — oipc.bc.ca.
Alberta residents: Office of the Information and Privacy Commissioner of Alberta — oipc.ab.ca.
Ontario residents and all other provinces (Manitoba, Saskatchewan, Nova Scotia, New Brunswick, Newfoundland and Labrador, PEI, and the territories): The federal Personal Information Protection and Electronic Documents Act (PIPEDA) applies to private-sector organizations like us. File complaints with the Office of the Privacy Commissioner of Canada — priv.gc.ca — 1-800-282-1376.
Note for Ontario residents: The Information and Privacy Commissioner of Ontario (IPC) regulates public-sector organizations under FIPPA and MFIPPA. For private-sector matters (like us), PIPEDA applies and complaints go to the federal Privacy Commissioner above.
Under Law 25 (Article 3.5) and PIPEDA's breach reporting rules (PIPEDA s. 10.1), if a confidentiality incident occurs and presents a risk of serious injury to the persons concerned, we will:
(1) Notify the Commission d'accès à l'information du Québec without delay. (2) Notify affected individuals by email or post, describing what happened, what data was involved, what we are doing to mitigate, and how to contact us. (3) Keep a confidentiality incident register for at least 5 years.
We maintain an internal breach response plan, restricted-access systems, encrypted data at rest and in transit, and regular software updates to reduce the likelihood of breaches.
We comply with Canada's Anti-Spam Legislation (CASL). We only send commercial electronic messages (CEMs) — such as newsletters, promotional offers, or product updates — to recipients who have given us express or implied consent.
Quote-related and transactional emails (responses to your questions, order confirmations, delivery updates, warranty service) are not commercial electronic messages under CASL section 6(6) and are sent regardless of marketing consent.
For a detailed list of cookies used by this site, see our cookies policy.
You can change your cookie preferences at any time using the floating gear icon in the bottom-left of every page.
We may update this policy to reflect changes in our practices or in the law. The "last updated" date below will reflect any change. Material changes will be flagged on the homepage for 30 days and, when required, communicated to active clients by email.